Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-08-01. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 Netwrix Auditor, Insecure Object Deserialization, #CVE-2022-31199 (critical) -DC-Oct2026-3089 https://dailycve.com/netwrix-auditor-insecure-object-deserialization-cve-2022-31199-critical-dc-oct2026-3089/
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | netwrix | auditor | - | - | - |